Description
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | MySQL Server | 5.5.54 and earlier, 5.6.20 and earlier | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | mariadb-10.0 | 10.0.30-0+deb8u1 | DSA-3809-1 |
| Debian 8 | mysql-5.5 | 5.5.55-0+deb8u1 | DSA-3834-1 |
| Debian 7 | mysql-5.5 | 5.5.54-0+deb7u2 | DLA-916-1, DLA-819-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | mysql-5.7 | 5.7.18-0ubuntu0.16.04.1 | USN-3269-1 |
| Ubuntu 16.04 LTS | percona-server-5.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | mariadb-5.5 | 5.5.56-1ubuntu0.14.04.1 | — |
| Ubuntu 14.04 LTS | mysql-5.5 | 5.5.55-0ubuntu0.14.04.1 | USN-3269-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | mariadb +7 | 1:5.5.56-2.el7 | RHSA-2017:2192 |
| RHEL 3 | rh-mariadb100-mariadb +8 | 1:10.0.33-3.el6 | RHSA-2018:0279 |
| RHEL 3 | rh-mariadb101-galera | 25.3.12-12.el6 | RHSA-2018:0574 |
| RHEL 3 | rh-mariadb101-mariadb +9 | 1:10.1.29-3.el6 | RHSA-2018:0574 |
| RHEL 2 | rh-mysql56-mysql +7 | 5.6.37-5.el6 | RHSA-2017:2787 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 | SUSE-RU-2023:3956-1 |
| SLES 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 | SUSE-RU-2023:3956-1 |
| SLES 12 SP5 | lz4 | 1.8.0-3.5.2 | SUSE-RU-2023:4991-1 |
| SLES 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 | SUSE-RU-2023:4991-1 |
| SLES 12 SP5 | mariadb104 | 10.4.30-8.5.46 | SUSE-RU-2023:4991-1 |
| SLES 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 | SUSE-RU-2023:4991-1 |
| SLES 12 SP2 | mariadb | 10.0.30-25.1 | SUSE-SU-2017:1315-1 |
| SLES 12 SP1 | mariadb | 10.0.30-25.1 | SUSE-SU-2017:1315-1 |
| SLES 12 | mariadb | 10.0.30-20.26.1 | SUSE-SU-2017:1311-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | mysql | 5.5.55-0.38.1 | SUSE-SU-2017:1137-1 |
| SLES for SAP 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 | SUSE-RU-2023:3956-1 |
| SLES for SAP 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 | SUSE-RU-2023:3956-1 |
| SLES for SAP 12 SP5 | lz4 | 1.8.0-3.5.2 | SUSE-RU-2023:4991-1 |
| SLES for SAP 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 | SUSE-RU-2023:4991-1 |
| SLES for SAP 12 SP5 | mariadb104 | 10.4.30-8.5.46 | SUSE-RU-2023:4991-1 |
| SLES for SAP 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 | SUSE-RU-2023:4991-1 |
| SLES for SAP 12 SP2 | mariadb | 10.0.30-25.1 | SUSE-SU-2017:1315-1 |
| SLES for SAP 12 SP1 | mariadb | 10.0.30-25.1 | SUSE-SU-2017:1315-1 |
| SLES for SAP 12 | mariadb | 10.0.30-20.26.1 | SUSE-SU-2017:1311-1 |
| SLES for SAP 11 SP4 | mysql | 5.5.55-0.38.1 | SUSE-SU-2017:1137-1 |
| SLE HPC 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 | SUSE-RU-2023:3956-1 |
| SLE HPC 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 | SUSE-RU-2023:3956-1 |
| SUSE OpenStack Cloud 7 | galera-3 | 25.3.23-8.3 | SUSE-SU-2018:1853-1 |
| SUSE OpenStack Cloud 7 | mariadb | 10.2.15-7.1 | SUSE-SU-2018:1853-1 |
| SUSE OpenStack Cloud 7 | mariadb-connector-c | 3.0.3-1.3.3 | SUSE-SU-2018:1853-1 |
| SUSE OpenStack Cloud 7 | rubygem-mysql2 | 0.4.10-7.2 | SUSE-SU-2018:1853-1 |
| SUSE OpenStack Cloud 7 | xtrabackup | 2.4.10-5.3 | SUSE-SU-2018:1853-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 | openSUSE-SU-2024:11038-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | mariadb | 10.1.22-r0 | — |
| Alpine v3.23 | mariadb | 10.1.22-r0 | — |
| Alpine v3.22 | mariadb | 10.1.22-r0 | — |
| Alpine v3.21 | mariadb | 10.1.22-r0 | — |
| Alpine v3.20 | mariadb | 10.1.22-r0 | — |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | mariadb | 10.1.22-r0 | — |
| Alpine v3.18 | mariadb | 10.1.22-r0 | — |
| Alpine v3.17 | mariadb | 10.1.22-r0 | — |
| Alpine v3.16 | mariadb | 10.1.22-r0 | — |
| Alpine v3.15 | mariadb | 10.1.22-r0 | — |
| Alpine v3.14 | mariadb | 10.1.22-r0 | — |
| Alpine v3.13 | mariadb | 10.1.22-r0 | — |
| Alpine v3.12 | mariadb | 10.1.22-r0 | — |
| Alpine v3.11 | mariadb | 10.1.22-r0 | — |
| Alpine v3.10 | mariadb | 10.1.22-r0 | — |
| Alpine v3.9 | mariadb | 10.1.22-r0 | — |
| Alpine v3.8 | mariadb | 10.1.22-r0 | — |
| Alpine v3.7 | mariadb | 10.1.22-r0 | — |
| Alpine v3.6 | mariadb | 10.1.22-r0 | — |
| Alpine v3.5 | mariadb | 10.1.22-r0 | — |
| Alpine v3.4 | mariadb | 10.1.22-r0 | — |
| Alpine v3.3 | mariadb | 10.1.22-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | mariadb +7 | 1:5.5.56-2.el7 | ELSA-2017-2192 |
Advisories 17
- RHSA-2018:0574 Red Hat Security Advisory: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0279 Red Hat Security Advisory: rh-mariadb100-mariadb security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:2787 Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:2192 Red Hat Security Advisory: mariadb security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3269-1 mysql-5.5, mysql-5.7 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DLA-819-1 mysql-5.5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-916-1 mysql-5.5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3834-1 mysql-5.5 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3809-1 mariadb-10.0 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2017:1315-1 Security update for mariadb SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2023:4991-1 Recommended update for mariadb104 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:1137-1 Security update for mysql SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1853-1 Recommended update for mariadb SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11038-1 libmariadbd-devel-10.6.4-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2023:3956-1 Recommended update for mariadb104 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:1311-1 Security update for mariadb SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2017-2192 Moderate: mariadb security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 7, 2017
References
- 96162 vdb-entry
- RHSA-2017:2787 vendor-advisory
- 1038287 vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
- RHSA-2018:0574 vendor-advisory
- RHSA-2018:0279 vendor-advisory
- DSA-3834 vendor-advisory
- DSA-3809 vendor-advisory
- http://www.openwall.com/lists/oss-security/2017/02/11/11
- RHSA-2017:2192 vendor-advisory